Sub-processors

Last updated: February 2026

Overview

IncidentFox uses the following sub-processors to deliver our service. We carefully select partners that meet our security and privacy standards.

Current Sub-processors

Sub-processor Purpose Data Processed Location
Anthropic
AI/LLM provider (Claude) for incident investigation Slack messages, investigation context United States
Amazon Web Services (AWS)
Cloud infrastructure hosting (EKS, RDS) All customer data United States (us-east-1)
Slack Technologies
Authentication and messaging platform Workspace info, user IDs United States

Note: User-connected integrations (Datadog, PagerDuty, Coralogix, Sentry, Grafana, GitHub, etc.) are not sub-processors. These are connected directly by customers, and IncidentFox queries them on behalf of the user during investigations.

Data Processing Details

Here's how your data flows through our sub-processors:

  • Slack: IncidentFox authenticates via Slack OAuth and receives messages through Slack's Events API. No data is stored by Slack beyond their standard message retention.
  • AWS: All IncidentFox infrastructure runs on AWS. Investigation data, Slack message indices, and metadata are stored in encrypted RDS databases and S3 buckets in the us-east-1 region.
  • Anthropic: Investigation context (logs, metrics, Slack messages) is sent to Anthropic's Claude API for analysis. Anthropic does not use API data for model training and retains data only for abuse monitoring (per their policy).

Security & Compliance

All sub-processors are selected based on:

  • SOC 2 Type II compliance (or equivalent security certifications)
  • Encryption at rest and in transit (AES-256, TLS 1.2+)
  • GDPR and data protection compliance
  • Data Processing Agreements (DPAs) in place

Updates to Sub-processors

We will update this page when sub-processors are added, removed, or changed. To stay informed:

Subscribe to changes: Email privacy@incidentfox.ai to receive notifications when this page is updated.

We will provide at least 30 days notice before adding new sub-processors that process customer data.

Questions?

For questions about our sub-processors or data processing practices: